IBM MQ Whats new - up to 9.3.4.pdf

TechCon 2022
IBM MQ What’s New Since 9.3.0: 9.3.1 -> 9.3.4
Rob Parker
Security Architect, MQ Distributed
parrobe@uk.ibm.com
© 2022 IBM Corporation
IBM MQ | 30 Years of Innovation

Important Disclaimers
IBM’s statements regarding its plans, directions and intent are subject to
change or withdrawal without notice at IBM’s sole discretion. Information
regarding potential future products is intended to outline our general product
direction and it should not be relied on in making a purchasing decision. The
information mentioned regarding potential future products is not a
commitment, promise, or legal obligation to deliver any material, code or
functionality. Information about potential future products may not be
incorporated into any contract. The development, release, and timing of any
future features or functionality described for our products remains at our sole
discretion.
© Copyright IBM Corporation 2023. All rights reserved. The information contained in these materials is provided for informational purposes only, and is provided AS IS without warranty of any
kind, express or implied. Any statement of direction represents IBM’s current intent, is subject to change or withdrawal, and represent only goals and objectives. IBM and the IBM logo are
trademarks or registered trademarks of International Business Machines Corporation, in the United States and/or other countries. Other product and service names might be trademarks of
IBM or other companies. A current list of IBM trademarks is available on ibm.com/trademark.
2

Mix and Match
Both are available under the
same license.
Both can interoperate, just
like any previous version of
MQ.
Continuous Delivery
New CD versions of MQ are
released approximately
every four months,
incrementally introducing
new product capabilities.
Intended for those who can
continually integrate.
Long-Term Support
Approximately every two
years a new LTS version is
released, rolling up many of
the CD capabilities into a
release with 5+3 support.
Required by those looking
for fixed function.
In 2016 MQ introduced
a dual Long-Term
Support and a
Continuous Delivery
model.
IBM MQ 9.3 LTS
V9.3.1 CD
2021 2022
V9.3 LTS V9.3.2 CD
2023
2020
V9.3.3 CD
2024
V9.3.4 CD
Future
LATEST
LTS
GSE UK 2023 / © 2023 IBM Corporation
V9.2 LTS V9.2.1 CD V9.2.2 CD V9.2.3 CD V9.2.4 CD V9.2.5 CD
Now
All the function delivered in the 9.2.x CD releases is available in the
long-term support release V9.3 LTS

What’s new in 9.3.0?

IBM MQ 9.3 LTS enhancements since 9.2 LTS (2020-2022)
Simplified Linux
install
MQ Console
remote queue
manager
support
Streaming
queues
dspmqinst for
IBM i
MQ Console
application
quick start
Idempotent
MQSC DELETE
commands
TLS enabled
.NET XA
monitor
SNI hostname
support for
channel routing
Multiple queue
manager
certificates for
MQIPT
TLS-only
communication
switch
Cryptographic
hardware
support for
client
passwords
Key repository
passwords
IBM MQ scaler
for KEDA
Apache Qpid
JMS support
over AMQP
Point-to-point
support for
AMQP
Jakarta
Messaging 3.0
support
Uniform Cluster
aware MDBs
Encrypted
MQTT channel
passphrases
TLS 1.3 across
all protocols
Hardware
accelerated
compression
for AIX
Non-OS user
authorizations
Uniform Cluster
support for
request/reply
flows
PKCS#12 key
repository
support
Stream MQ
Appliance error
logs
Java 17
support for
applications
Raft based
Native HA for
OpenShift and
Kubernetes
Helm chart
sample for
Kubernetes
deployments
Client attached
dead-letter
handler
OpenShift
Prometheus
integration with
ServiceMonitor
MQ Appliance
synchronous
DR replication
OpenShift
support for
zLinux and
Power
MQ Appliance
failed resource
action control
OpenShift
Operator
managed
rolling upgrade
64-bit RBA
default for z/OS
IBM MQ on
Cloud LogDNA
integration
Transfer
logging for
Managed File
Transfer
MFT managed
call control
over REST
Start/stop of
MFT resource
monitors
Redistributable
MFT Logger
Queue depth
SMF data for
z/OS
IBM MQ
AsyncAPI
binding
Separate
statistics and
accounting
intervals for
z/OS
AsyncAPI code
generator for
IBM MQ JMS
applications
Browse support
for AMQP
applications
Transaction
boundary
aware Uniform
Cluster
AT-TLS support
for z/OS
TLS 1.3 support
for MQIPT
Disk encryption
for the MQ
Appliance
.NET 6
application
support
Extended REST
API message
properties
www.ibm.com/docs/en/ibm-mq/9.3?topic=930-whats-new-in-mq

IBM MQ | What’s new in 9.3 LTS
Easier getting-started
experience
Enhancements to the IBM MQ
Console (GUI) enable new users to
get started more easily than ever
before, and connect to a broader
range of apps through additional API
and language support.
Increased
resilience
Rapid quorum-controlled failover
with Native HA delivers full protection
for every recoverable operation and
message – no loss or duplication!
Plus intelligent workload balancing
for mission critical apps.
Hardened
security
Several security enhancements
build on existing robust security
mechanisms to protect mission-
critical data. These include TLS 1.3
support and a simplified container
authority model
Sophisticated Managed
File Transfers
Enhancements to prioritize
transfers, diagnose and resolve
issues more rapidly, and deploy file
transfer capabilities in containers for
reliable, efficient, and secure data
and file transfer.
Streaming queues
Make data available to Apache Kafka,
AI, and analytics applications to gain
insights, or store for auditing or
replay purposes without impacting
the flow of data between mission-
critical applications.
Simplified
administration
View and manage MQ estate from a
single user interface, additional
commands make it easier to
configure queue managers
consistently, and use the enhanced
REST APIs to interact with MQ.
6
IBM Hursley Americas Summit, October 2023 / © 2023 IBM Corporation
IBM MQ v9.3 Long Term Support release delivers the latest innovations to clients on
the Enhanced support lifecycle (5+3).
For a full list of What’s new and changed, visit the IBM MQ 9.3 Documentation
9.3 LTS June / July 2022 Read the announce here
Hybrid cloud software, MQ Appliance, & MQ on Cloud / zOS
9.3.1 CD October / November 2022
9.3.2 CD February / March 2023
9.3.3 CD June / July 2023
…. Future!

Queue manager
follower
Queue manager
leader
Queue manager
follower
Availability Zone Availability Zone Availability Zone
Instance 1
storage
Instance 2
storage
Instance 3
storage
Exactly once state replication
Automatic availability
Replicated in real-time
Exact replicas
IBM MQ Native HA
OpenShift and Kubernetes
No external dependencies
RAFT based, leader/follower quorum
RAFT

Streaming Queue
IBM MQ Streaming Queues
IBM MQ

Tap into the value of existing data
flowing over MQ
Zero change to the existing
applications
– Stream Processing
– Collect real world data
– Auditing
– Replay
– Investigation
– Test data
IBM MQ Streaming Queues
Streaming Queue

IBM MQ 9.3.1 CD enhancements
https://www.ibm.com/docs/en/ibm-mq/9.3?topic=931-whats-new-in-mq
Streaming
queues on
shared queues
(backported to
LTS)
SMF queue
statistics
enhancements
RDQM on
RHEL 9
CAPEXPRY
.NET 6 libraries
64-bit Channel
Initiator
MQIPT MQCSP
Password
Protection
Console
observability

CAPEXPRY
CAPEXPRY provides an administrative way to
set the maximum expiry value that a
message can have when sent to a queue /
published to a topic
Useful if you have a “badly behaved”
application which sends messages without
setting an expiry value and you can’t easily
change it
Originally provided in the MQ 8 time frame
(via an APAR) as a custom property
Custom property approach was always
intended to be a temporary solution
Application
MQPUT Q1
MQMD.EXPIRY=MQEI_UNLIMITED
DEF QL(Q1)
CUSTOM(“CAPEXPRY(600)”)
MQMD.EXPIRY=600

CAPEXPRY
In 9.3.1, on distributed platforms,
CAPEXPRY now becomes a first class
attribute
z/OS will add support later
For any given object you can either use the
custom CAPEXPRY or the first class
CAPEXPRY attribute, but you can’t use both
at once
Works the same as before, but is now cluster
aware
Application
MQPUT Q1
MQMD.EXPIRY=MQEI_UNLIMITED
DEF QL(Q1) CAPEXPRY(600)
MQMD.EXPIRY=600

64-bit channel initiator
Previously server-connection channel
messages were staged in the channel
initiator in a set of buffers in 31 bit storage
Large messages could limit the maximum
number of active channels
Now with 64 bit storage in the channel
initiator, a larger number of applications can
connect at the same time
Samples will be changed to have
MEMLIMIT=2G (2GB 64 storage as a starting
point)
9.3.0 9.3.x
31 bit 10.4MB 112KB
64 bit 0 11.6MB
104 concurrent clients sending 10MB messages.
Memory footprint per client
Assuming 1.3GB spare space below the bar this implies max
128 clients at 9.3.0.
At 9.3.1 we could get to 9999 clients (the max) assuming
suitable MEMLIMIT

More flexible monitoring
9.3.0 added a new set of per queue statistics
Enabled by setting STATQ(ON) on individual
queues or by setting STATQ(ON) on the
queue manager and STATQ(QMGR) on the
queues
No detectable performance impact when
enabled, even when writing records out
every second
9.3.1 added
DISPLAY QSTATUS information to these
NB: data is output regardless of the MONQ
attribute on the queue
MV41,MQ27,2022/06/24,11:27:29,VRM:931
Queue Name…………..Q1
Disposition……………..Private
Pageset ID………………4
Bufferpool ID…………..2
Current Depth………….10
Open Output Count…..2
Open Input Count……..1
QTIME Short……………..5029503
QTIME Long………………5029503
Last Put Time…………….2022/06/24,11:17:33.902190
Last Get Time…………….2022/06/24,11:18:33.902190
Uncommitted Changes.No
Oldest Message Age…..64
Sample MP1B output

IBM z Anomaly Analytics now supports MQ
Proactively detect problems
Machine learning and AI to identify anomalous behavior
• Leverage historical data to build a model
representative of normal operations
• Real time scoring of subsystem KPIs against the
model helps detect operational anomalies through
analytics and trend analysis
• Anomalies may point to broader issues impacting
the environment
• Generate events to alert operations of when
anomalous behavior has been detected
• Events can be correlated with data from your
enterprise providing a hybrid cloud view of your entire
enterprise
Supports MQ SMF 115 (statistics data)

IBM Z Operational Log and Data Analytics
IBM Z specific insights & searches
IBM Z Operational Log and Data Analytics
IBM Z Data Analytics Platform + dashboards
Efficient data collection and streaming
Splunk dashboards Elastic dashboards
Advanced Data Streaming
Gain near real-time access to IBM Z operational
data where you want to run analytics
Dashboards and searches
Leverage powerful dashboards to extract
contextualized insights from your IBM Z
operational data. Prebuilt searches save valuable
time and resources when doing deeper analysis
IBM Z Data Analytics Platform
Determine the cause of incidents on platform
with the included log analysis platform based on
an industry leading open-source solution

MQ Dashboards and Log Searches

MQ Console observability
The MQ Console now makes it easier to see what’s
happening on a queue manager.
See which applications are active, over which
channel they’re connected, and what they’ve been
doing.
Easily understand how a queue manager is
interacting with other queue managers in its
network.

More
information in
DIS QMSTATUS
for Native HA
More
information in
DIS QMSTATUS
MQ Console
application view
TLS 1.3 support
for managed
.NET clients
Java modular
application
support
Simplified
messaging
REST API
security
Native HA
entitlement with
advanced in
addition to CP4I
SMF116
STREAMEDN for
streaming
queues
DR between 2
HA pairs
Appliance

More Native HA info in DIS QMSTATUS
For Native HA, DIS QMSTATUS has been enhanced
to make it easy to discover where the active
instance of the queue manager is running, and the
status of the replicas (similar to dspmq –o
nativeha)
DISPLAY QMSTATUS TYPE(NATIVEHA)
3: DISPLAY QMSTATUS TYPE(NATIVEHA)
AMQ8705I: Display Queue Manager Status Details.
INSTANCE(nha_qm1.0) TYPE(NATIVEHA)
ROLE(ACTIVE)
HAINITDA(2022-06-08) HAINITL(0:0:13:54372)
HAINITTI(16.06.54)
REPLADDR(172.30.195.172(8844))
ROLE(REPLICA)
BACKLOG(0) CONNACTV(YES)
INSYNC(YES)
REPLADDR(172.30.195.172(8845))
ROLE(REPLICA)
BACKLOG(661) CONNACTV(YES)
INSYNC(NO)
REPLADDR(172.30.195.172(8846))

MQ Ansible samples
Ansible provides a simple way to automate
configuration and management of applications
and infrastructure
Ansible playbooks can be run against z/OS
providing a common approach across all your IT
infrastructure
The IBM z/OS core collection makes it easy for
Ansible to interact with data sets, submit jobs, run
commands, etc
Sample MQ for z/OS playbooks are now available
for creating, altering, displaying and deleting
queues. These playbooks can be easily adjusted to
work with the other MQ object
An alternative set of playbooks are also available
for configuring MQ using simple YAML templates.
These can be used on all platforms, via the MQ
REST API
https://github.com/ibm-messaging/mq-ansible-yaml-commands
# Start a TCP listener.
- command: start
parameters:
port: 1407
qualifier: listener
# Start a channel.
- command: start
name: MQ07.TO.MQ08
qualifier: channel
https://github.com/IBM/z_ansible_collections_samples/tree/master/zos_su
bsystems/mq
zos_operator:
cmd: "{{ mq_cpf }} DEF QL ( {{ mq_queue_name }} ) DESCR(‘’A QUEUE'')"

Support for Java Modules
MQ classes for JMS / Jakarta enhanced to
allow them to be used properly with modular
applications (introduced in Java 9)
package mleming.apps;
import javax.*;
import com.ibm.mq.jms.*
public class DoJMS {
public static void main(String[] args) {
//do some messaging
}
}
2) Use the MQ modules in your app
1) Import the MQ modules into your modular app
module do.jms {
requires com.ibm.mq.javax;
}
3) Run app with MQ modules
java --module-path MQ_HOME/java/lib/modules/javax
-m do.jms/mleming.apps.DoJMS

DR between two HA pairs on MQ Appliance
The MQ appliance now supports DR between two HA pairs, meaning that HA is automatically
available after a DR failover, removing the manual steps that are currently required to setup an HA
group after a DR failover
Synchronous Synchronous
Asynchronous

Remote REST
messaging
AMQP
performance
improvements
MQ Console
better linking,
and objects
associated with
queues
Supported
MQ/Kafka
Connectors
Native HA
damaged object
auto recovery
More per queue
SMF data
Disk space
monitoring
CLI SSH
authentication
using certificate
Appliance Appliance

Remote REST messaging
We are seeing more and more customers using the
MQ web server
We are gradually removing the requirement that the
server is collocated with the queue managers that it
interacts with:
Admin REST API: REST admin gateway in 9.1.0
MQ Console: remote support in 9.3.0
Messaging REST API: remote support in 9.3.3
The last two use JSON CCDTs to connect to remote
queue managers via client connections
Very useful if you want to interact with MQ on z/OS
but not install the web console there
Linux
MQ
Web
z/OS AIX

More flexible monitoring
Full set of per queue statistics completed
65 data points per queue

AMQP performance improvements
AMQP apps using QOS_AT_LEAST_ONCE
have to acknowledge a message once they
have processed it
When the queue manager receives the
acknowledgement, it deletes the message
Prior to 9.3.3 this delete was done on a per-
message basis
From 9.3.3 messages are acknowledged in
batches or after a period of time has expired
This new approach provides a big
improvement in throughput

MQ and Kafka
We see many customers wanting to use MQ
and Kafka together
Either because they want to stream a copy
of existing data moving through MQ into
Kafka
Application Application
TO.APP
STREAMQ(TO.KAFKA)
TO.KAFKA
Kafka Connect +
MQ – Kafka Source Connector

Transaction
MQ and Kafka
We see many customers wanting to use MQ
and Kafka together
Either because they want to stream a copy
of existing data moving through MQ into
Kafka
Or because they want a way to get data into
Kafka that ensures data is only sent if their
transaction commits
This is a very common z/OS use case
TO.APP
TO.KAFKA
Kafka Connect +
MQ – Kafka Source Connector
Application
Application

The IBM MQ / Kafka connector
IBM provides MQ-Kafka connectors which can be used
to move data between MQ and Kafka
The connectors can be used with any queue manager
including those running on z/OS
Supported with either IBM Event Streams or IBM MQ
Advanced entitlement, also available unsupported as
open source
Connectors will be available from:
– Connector pack on z/OS (9.3.3 onwards)
– Fix Central – distributed (any version)
– GitHub releases page (any version)
https://github.com/ibm-messaging/kafka-connect-mq-
sink/releases
https://github.com/ibm-messaging/kafka-connect-mq-
source/releases
IBM MQ
QUEUE:
TO.KAFKA
QUEUE:
FROM.KAFKA
Kafka Connect worker
TOPIC:
FROM.MQ
Kafka Connect worker
MQ SINK
CONNECTOR
TOPIC:
TO.MQ
MQ SOURCE
CONNECTOR
Kafka brokers

Discovery
Build a self-service catalog of
event sources for users to
securely browse and utilize
Distribution
Collect streams of real-time
business events with enterprise-
grade Apache Kafka
Processing
Define business situations in an
intuitive, easy-to-use authoring
canvas in order to act in real-time
and automate decisions
Put business event to work by enabling users
to detect situations, act in real time, automate
decisions, and maximize their revenue
potential
IBM Event Automation Composable set of capabilities

Tuning options
for log I/O
warnings
Improvements
in media image
scheduling
MQ Console
qmgr overview
tab
JSON web
tokens
JMS support for
influencing
rebalancing
Native HA,
smarter media
image
scheduling
Exactly-once
MQ/Kafka
Connectors
Simplified Java
/ JMS
Topologies
Functional
parity between
Advanced and
Advanced VUE
CSQ1LOGP can
deal with
message
properties
SSH support for
rsa-sha2-256 &
rsa-sha2-512
signatures
Appliance

The industry’s first assured MQ/Kafka connectors
IBM MQ Advanced now offers assured (‘once-
and-only-once’), bidirectional delivery of data for
Apache Kafka systems with updated Sink and
Source connectors so businesses can discover
and act on events without loss or duplication.
Intelligent media imaging for Native HA
Automatic media imaging is provided for Native
HA queue managers, reducing the network load
between Native HA queue managers.
Enhanced security for containers
A read only root filesystem is enabled so that
administrators can make IBM MQ containers
tamper-proof and ensure no foreign executables
can be written to disk in a security breach.
Containers for MacOS
MacOS developers can now build and run an IBM
MQ container image natively on Apple Silicon
without the need for Rosetta emulation.
Instructions are published in the MQ
Container GitHub repo.
IBM MQ | What’s new in v9.3.4
IBM MQ distributed and ‘MQ on Cloud’
Token-based authentication
A new method for authentication with tokens
added, improving security and centralizing
identity management for queue managers
running on Unix-based platforms.
Rapidly identify and resolve issues
Enable rapid identification and resolution of
issues using a new overview dashboard in the
IBM MQ Console, regardless of where or how
IBM MQ is deployed.
Automated workload balancing for JMS apps
Uniform Clusters is enhanced to
automatically balance JMS workloads,
enabling users to build resilient, horizontally
scalable messaging systems.
Faster diagnosis of OS and storage issues
New variables are added to increase or
decrease the threshold at which a warning
message is written to the queue manager log
if a slow read/write time is detected.
IBM MQ Appliance
Industry Standard Authentication support for SSH
Using SSH certificates provides stronger security than using
passwords and enables many businesses to automate
deployment in a more secure manner that is consistent with
other parts of their IT estate.
Upgraded resiliency, security, and ease of use across platforms.
eGA: October 19th 2023 (Distributed, MQ Appliance, MQ on Cloud), November 3rd 2023 (MQ for z/OS)
MQ Appliance clients benefit from the IBM MQ Console updates,
automated workload balancing, and assured Kafka connectors
listed in the distributed section.
IBM MQ for z/OS
Message recovery from logs
z/OS administrators can use improved tools to recover
messages containing message properties from logs.
Simplified MQ architecture
IBM MQ classes for JMS/Jakarta Messaging and Java
applications running in a batch environment will be able to
use client connectivity to any z/OS queue manager, simplifying
MQ architecture.
MQ for z/OS also benefits from the MQ Console overview dashboard.
Assured MQ Sink & Source connectors are made available for MQ
Advanced z/OS / Advanced VUE.
37

Exactly-once support
In 9.3.4, the MQ / Kafka connectors have been
updated so that they support at-least-once
and exactly-once message delivery
semantics
Previous connectors only supported at-least-
once. No other vendor has exactly-once MQ
connectors
Updated connectors aren’t open source. Can
only be obtained with MQ Advanced or IBM ES
entitlement
Exactly-once requires extra configuration to
enable, both in MQ (a state queue), and Kafka.
A relatively recent version of Kafka is also
required
© 2023 IBM Corporation , IBM Confidential

MQ offerings: before
IBM MQ AMS for z/OS
End to end protection for
message data
IBM MQ MFT for z/OS
Integrate file data into an
MQ network
Connector Pack
Aspera fasp.io Gateway and Kafka
Connector
IBM MQ for z/OS VUE
Core MQ product
IBM MQ Advanced for
z/OS VUE (5655-AV1)
OTC
Extra support for TCP/IP
Java/JMS/MFT agents connecting
to remote z/OS queue managers
IBM MQ z/OS
(5655-MQ9)
MLC
Core MQ product
IBM MQ z/OS VUE
(5655-VU9)
OTC
Core MQ product
IBM MQ AMS for z/OS
message data
IBM MQ MFT for z/OS
MQ network
IBM MQ Advanced for
z/OS (5655-AV9)
OTC

MQ offerings: now
IBM MQ AMS for z/OS
message data
IBM MQ MFT for z/OS
MQ network
Connector Pack
Connector
IBM MQ for z/OS VUE
Core MQ product
IBM MQ Advanced for
z/OS VUE (5655-AV1)
OTC
MFT agents connecting to remote
z/OS queue managers
IBM MQ z/OS
(5655-MQ9)
MLC
Core MQ product
IBM MQ z/OS VUE
(5655-VU9)
OTC
Core MQ product
IBM MQ AMS for z/OS
message data
IBM MQ MFT for z/OS
MQ network
Connector Pack
Connector
IBM MQ Advanced for
z/OS (5655-AV9)
OTC
MFT agents connecting to remote
z/OS queue managers
JMS/Java batch
connections will
be supported to
remote z/OS
queue
managers
regardless of
product
entitlement
*APAR required
for 9.3 and 9.2
9.3.0 & 9.2.0

CSQ1LOGP EXTRACT supports
message properties
CSQ1LOGP EXTRACT enhanced to fully
extract messages with message properties,
with the message properties going into an
RFH2 header
This means that, if needed, those messages
can be replayed, including the properties,
using CSQ4LOGS, just like any other
message
//STEP1 EXEC PGM=CSQ1LOGP,REGION=0M
//STEPLIB DD DISP=SHR,DSN=thlqual.SCSQANLE
// DD DISP=SHR,DSN=thlqual.SCSQAUTH
// DD DISP=SHR,DSN=thlqual.SCSQLOAD
//ARCHIVE DD DISP=SHR,DSN=xxx.yyy.A0030620
// DD DISP=SHR,DSN=xxx.yyy.A0030621
//SYSPRINT DD SYSOUT=*
//SYSSUMRY DD SYSOUT=*
//CSQCMT DD DSN=xxx.MSGS.COMMIT,
// DISP=(NEW,CATLG),SPACE=(CYL,(1,10),RLSE),UNIT=SYSDA
//SYSIN DD *
EXTRACT(YES) SUMMARY(NO)
URID(xxxxxxxxxxxx)
/*
//STEP2 EXEC PGM=CSQ4LOGS,PARM=(‘QM1 REPLAY'),REGION=0M
//STEPLIB DD DSN=thlqual.SCSQANLE,DISP=SHR
// DD DSN=thlqual.SCSQAUTH,DISP=SHR
// DD DSN=thlqual.SCSQLOAD,DISP=SHR
//FILEIN DD DSN=xxx.MSGS.COMMIT,DISP=SHR
//SYSDBOUT DD SYSOUT=*
//SYSABOUT DD SYSOUT=*
//SYSPRINT DD SYSOUT=*
//SYSOUT DD SYSOUT=*
/*
CSQ1LOGP CSQCMT
output
CSQ4LOGS
QM1
Q1

New overview tab for queue
managers in IBM MQ Console
The IBM MQ Console overview tab of the queue
manager page, introduced in v9.3.4, displays
information about a queue manager and the
resources it is consuming
✓ Eliminate manual look-up
✓ Immediately understand the overall state of a
queue manager
✓ Act on any emerging problems before they
become issues
Some of the information is derived from monitoring
system topics so not everything is available on z/OS

v9.3.4 introduces a Console
overview tab displaying
information about a queue
manager and the resources
it is consuming.
✓ Eliminate manual look-up
✓ Immediately understand
the overall state of a
queue manager
✓ Act on any emerging
problems before they
become issues
IBM MQ | 9.3.4 MQ Console Overview Dashboard
44
See if the Queue
Manager is under
pressure (CPU,
Memory, Storage).
These will map to
different metrics on
each form factor.
See if any queues are
becoming full – and
need action.
If the queue manager
is part of a “MQ
Network”, show the
connected Queue
Managers.
See activity within the MQ Network from
this Queue Managers view point.
See the number of connected
applications, channel
instances and MQ
connections.
Gain confidence that everything
is fine, by seeing the number of
messages passing through the
Queue Manager.
Available in IBM MQ v9.3.4

MQ available in IBM z/OS Cloud Broker
Use Red Hat OpenShift to easily deploy resources to z/OS, in your
hybrid cloud. Now including:
• Local and alias queues
• Server connection channels
https://github.com/IBM/zos_mq_operator

{
"alg": "HS256",
"typ": "JWT"
}
{
"sub": "1234567890",
"name": "John Doe",
"iat": 1516239022
}
HMACSHA256(
base64UrlEncode(header)
+ "." +
base64UrlEncode(payload),
secret
)
IBM MQ uses a password-less approach to authentication with
JSON Web Tokens (JWT) enabling applications to operate in a
secure, Multi-Factor Authentication (MFA) environment.
Token-based authentication eliminates the need for
storing and transmitting passwords, which can be a
security vulnerability.
You can use one trusted issuer so your applications
can authenticate with many services without separately
registering with all of them.
Tokens can be used across multiple, diverse applications
or other endpoints, enabling easier secure collaboration
between enterprises and platforms.
IBM MQ | v9.3.4 Token-based authentication
IBM MQ
Token Issuer
App
Obtain
Token
Connect with Token
Secure
Scalable
Flexible
Available in IBM MQ v9.3.4 and above on Unix-based platforms (inc. AIX®, Linux®, and OpenShift® Container Platforms.)
46

IBM MQ Appliance SSH Password and
Certificate Authentication
• SSH service enhanced to support standard
password and certificate authentication
• CA-signed certificates simplify automation and
offer improved security over passwords
• Revoke individual user certificates, if required
$ ssh -i admin-key admin@m2003a00
m2003a00
Unauthorized access prohibited.
Welcome to IBM MQ Appliance M2003A console configuration.
Copyright IBM Corporation 1999, 2023
Version: MQ00.9.3.3.0 build 351779mq on May 11, 2023 12:31:32 PM
Delivery type: CD
Serial number: 0123456
mqa#

Other MQ news

IBM MQ maintenance
Effective January 2023 for all in-support releases.
Two types of maintenance for distributed platforms:
• Fix packs
Cumulative updates for Long Term Support
(LTS) releases, as per previous practice.
• Cumulative security updates (CSUs)
Smaller updates that provide security fixes and
which are released monthly (when required).
This model also applies to the JMS, MFT and web UI
features on z/OS, but the model for other z/OS
maintenance remains unchanged.
How do I obtain and install CSUs?
CSUs are provided as per fix packs and they are
installed in the same way.
How do I identify fix packs and CSUs?
The V.R.M.F is updated for both. Fix packs are
identified by an F-digit that is a multiple of 5 (5, 10,
15, …), and CSUs use the other F-digit values (1, 2, 3,
4, 6, 7, …).
Are updates cumulative?
Yes. Each CSU is built on the latest fix pack that
precedes it.
What releases are CSUs produced for?
All LTS releases (including those in extended
support), plus the latest CD release.
https://www.ibm.com/support/pages/
changes-ibm-mqs-maintenance-delivery-model

On April 18th 2023, IBM announced expanded support options for select software programs for clients with active S&S:
• IBM Extended Support - provides an additional four years of extended support for end-of-support versions or releases to enable a client to
execute a migration or upgrade.
• IBM Advanced Support - an enhanced experience with prioritized case handling and shorter response time objectives. Available during
Standard Support phase only.
• IBM Sustained Support – for IBM programs that have been withdrawn from market and their end-of-support date reached.
IBM MQ | Extended Support changes
Version V8.x V9.0.x V9.1.x V9.2.x V9.3.x
Standard support Ended
30-Apr-2020
Ended
30-Sep-2021
Available until
30-Sep-2023
End of Support has
not yet been
announced
GA: 2020 with 5
years of support so
EoS is estimated
30-Sep-2025
End of Support has
not yet been
announced
GA: 2022 with 5
years of support so
EoS is estimated
30-Sep-2027
Extended support
Available for +3
years until 30-Apr-
2023
Available for 3
years until 30-Sep-
2024
Support includes:
• fixes for new
defects
• fixes for known
defects
• usage
• security patches
Available for 3
years until 30-Sep-
2026
Support includes:
• fixes for new
defects
• fixes for known
defects
• usage
Available for 3
years until ~30-
Sep-2028
Support includes:
• fixes for new
defects
• fixes for known
defects
• usage
Available for 3
years until ~30-
Sep-2030
Support includes:
• fixes for new
defects
• fixes for known
defects
• usage
Extended Support
(Usage & Known
Defect only – U/KD)
Available for +1
year until
30-Apr-2024
Available for +1
year until
30-Sep-2025
Available for +1
year until
30-Sep-2027
Available for +1
year (until ~30-
Sep-2029)
Available for +1
year (until ~30-
Sep-2031)
Standard
Support
Extended
Support
Extended
Support (U/KD)
Advanced
Support
© 2023 IBM Corporation 50

IBM MQ | Extended Support changes
5 years 1 year 3 years
Standard support Extended Support
• Fixes for new critical defects
• Support for routine usage and how-to
questions
• Basic troubleshooting
• Standard SLOs (Sev1 = 24x7)
• Unlimited number of technical support
incidents
• Existing code patches and fixes (known
defects)
• English language only support
Extended Support
• Support for routine usage and how-to
questions
• Basic troubleshooting
• Standard SLOs (Sev1 = 24x7)
• Unlimited number of technical support
incidents
• Existing code patches and fixes (known
defects)
• English language only support
IBM MQ will move to a 5+1+3 model at the
next LTS
The next major version of IBM MQ has not
been announced but it is expected in mid-
2024 (IBM MQ typically releases a major
version every 2 years).
The next major version will communicate the
lifecycle as part of the Announcement Letter
which is standard practice.
IBM Hursley Americas Summit, October 2023 / © 2023 IBM Corporation 51

MFT
deprecations
• The -
credentialsFile
parameter of
fteObfuscate has
been replaced
• Several FTE
environment
variables have also
been replaced
• See
documentation
page for details
AMS ciphers
• MD5, SHA1 RC2,
DES and 3DES
ciphers are
deprecated
• Customers should
migrate to use a
stronger algorithm
SSLv3/TLS 1.0
• All SSLv3 and TLS
1.0 ciphers are
deprecated
• Currently these
must be re-
enabled to be used
migrate to stronger
ciphers, either TLS
1.2 or TLS 1.3
32-bit client app
• Both network and
local bindings
• Supported
throughout 9.3.0
LTS, but will be
removed in a later
CD or LTS release
recompile their
applications as 64-
bit
Deprecation statements
https://www.ibm.com/docs/en/ibm-mq/9.3?topic=930-deprecated-stabilized-removed-features-in-mq

XPARM utility
The -credentialsFile
parameter of
fteObfuscate has
been replaced
• used to migrate
to Websphere
MQ for z/OS®
7.0
CMS keystore
support for
Java, AMQP &
MQTT
• MD5, SHA1 RC2,
DES and 3DES
ciphers are
deprecated
migrate to
PKCS#12
runmqckm,
strmikm,
mqiptkeycmd &
mqiptkeyman
• Runmqakm and
keytool are
available as
alternatives
Blockchain Bridge
• Now removed from all
supported releases
• Blockchain
connectivity can be
achieved with IBM
App Connect or
through App Connect
capabilities available
with IBM Cloud Pak
for Integration.
Deprecation statements
https://www.ibm.com/docs/en/announcements/cloud-pak-integration-202341-mq-934-deliver-new-
integration-capabilities-stepzen-graph-server-is-renamed#abstr__title__1

54
IBM MQ | AWS Partner Solution
Resilient connectivity
Use the market leader for
reliable, secure, scalable
message distribution
The IBM MQ AWS Partner Solution is a best-
practice deployment of an IBM MQ Native HA
queue manager running on the AWS Elastic
Kubernetes Service (EKS) platform.
Reduce hundreds of manual procedures to just a
few steps to build and start a best-practice
deployment of IBM MQ on AWS Elastic
Kubernetes Service (EKS) within minutes.
To get started, visit:
aws.amazon.com/solutions/partners/ibm-mq/
Rapid deployment
Deploy fully functional MQ
software on the AWS Cloud
with a single click
Proven topology
Benefit from container-
ready, highly available
reference architecture
Available now! Released 2Q 2023

55
• Understand and help define our future strategy and
direction for the product
• Attend product Design Thinking sessions where IBM
Development teams will share ideas, plans and 'mock
ups' of future products and capabilities/features
• Become a 'Sponsor User' for features that interest you
significantly, influencing design and implementation
• Try out the early release versions of new features in
our cloud environment, no install, no hassle access
• Be invited to no-cost enablement sessions on the new
features or product to understand how new features
benefit your businesses and how to implement them
quickly and easily
Email MQ.Early.Program@uk.ibm.com or for more details visit
https://www.ibm.com/uk-en/campaign/early-experience-programs

56
IBM MQ | Learning Path & Badges
NEW! About this badge:
✓ Understand the benefits of deploying IBM MQ solutions on AWS cloud.
✓ Demonstrate skills to deploy a queue manager by using docker compose, and they know
about the AWS services that are used.
✓ Deploy an interactive sample application on AWS to showcase messaging concepts,
✓ Develop extensions with Node.JS.
To earn the badge visit: developer.ibm.com/learningpaths/ibm-mq-on-aws-badge/
About this badge:
✓ Fundamental IBM MQ messaging concepts
✓ Create and configure a queue manager
✓ Working understanding of MQ objects such as channels, queues, and topics.
✓ Develop a JMS application to solve a high-level application integration scenario
To earn the badge visit: developer.ibm.com/learningpaths/ibm-mq-badge/ or ibm.biz/learn-mq
IBM Hursley Americas Summit, October 2023 / © 2023 IBM Corporation 56

57
IBM MQ | Other useful resources
- IBM TechXchange Community
- User forums, blogs, webcasts, and more
- www.ibm.biz/MQCommunity
- IBM MQ Podcast
- Where MQ experts discuss all things MQ!
- www.doyoumq.com
- Enhancement Request submission
- Request new or updated product features,
performance enhancements or information,
documentation updates and more
- www.ibm.biz/mqideas

ibm.biz/mq-london
ibm.biz/mq-virtual
ibm.biz/mq-newyork

Notices and disclaimers
© 2023 International Business Machines Corporation.
All rights reserved.
This document is distributed “as is” without any warranty, either express or
implied. In no event shall IBM be liable for any damage arising from the use of
this information, including but not limited to, loss of data, business interruption,
loss of profit or loss of opportunity.
Customer examples are presented as illustrations of how those customers have
used IBM products and the results they may have achieved. Actual performance,
cost, savings or other results in other operating environments may vary.
Workshops, sessions and associated materials may have been prepared by
independent session speakers, and do not necessarily reflect the views of IBM.
Not all offerings are available in every country in which IBM operates.
Any statements regarding IBM’s future direction, intent or product plans are
subject to change or withdrawal without notice.
IBM, the IBM logo, and ibm.com are trademarks of International Business
Machines Corporation, registered in many jurisdictions worldwide. Other product
and service names might be trademarks of IBM or other companies. A current list
of IBM trademarks is available on the Web at “Copyright and trademark
information” at: www.ibm.com/legal/copytrade.shtml.
Certain comments made in this presentation may be characterized as forward
looking under the Private Securities Litigation Reform Act of 1995.
Forward-looking statements are based on the company’s current assumptions
regarding future business and financial performance. Those statements by their
nature address matters that are uncertain to different degrees and involve a
number of factors that could cause actual results to differ materially. Additional
information concerning these factors is contained in the Company’s filings with
the SEC.
Copies are available from the SEC, from the IBM website, or from IBM Investor
Relations.
Any forward-looking statement made during this presentation speaks only as of
the date on which it is made. The company assumes no obligation to update or
revise any forward-looking statements except as required by law; these charts
and the associated remarks and comments are integrally related and are
intended to be presented and understood together.
60

IBM MQ Whats new - up to 9.3.4.pdf

More Related Content

What's hot (20)

Similar to IBM MQ Whats new - up to 9.3.4.pdf (20)

More from Robert Parker (20)

Recently uploaded (20)

IBM MQ Whats new - up to 9.3.4.pdf